Deputy Chief Information Security Officer (Deputy CISO)

Deputy Chief Information Security Officer leading security operations for the Investments division of the Virginia Retirement System. Responsibilities include overseeing threat monitoring, incident response, vulnerability management, and a 24/7 SOC; shaping and executing enterprise cybersecurity initiatives; aligning security controls with investment operations; ensuring compliance with Commonwealth standards; leading penetration testing and proactive threat detection; building and mentoring teams; collaborating across IT, business, and external partners; and ensuring business continuity and disaster recovery. Requires 10+ years in cybersecurity with leadership, deep expertise in security operations, risk management, and enterprise security architecture, and experience across cloud, networking, endpoint protection, and Microsoft ecosystem. Strong ability to influence and communicate with technical and executive audiences; mission-driven in a hybrid work environment (3 days in-office, 2 days remote) within Virginia.